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CLAIMS : 

What is claimed is: 

5 1. A method for authenticating LDAP referral searches, 
comprising : 

receiving a bind request from a LDAP referred search 
request ; 

searching the local directory for an entry 
10 corresponding to the distinguished name (DN) of the bind 
request ; 

authenticating the bind request if an entry for the 
bind DN is located within the local directory; 

checking a defined reference server for the prefix 
15 of the bind DN, if the bind DN is not found within local 
g directory; 

contacting the reference server for authentication, 
if the prefix of the bind DN is located on the reference 
server; and 

20 denying the bind request if both the local directory 

and the reference server do not contain an entry 
corresponding to the bind DN, 

2. The method according to claim 1, wherein the defined 
25 reference server contains : 
root DN's; and 
server location. 
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3 . A computer program product in a computer readable 
medium for use in a data processing system, for 
authenticating LDAP referral searches, the computer 
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program product comprising: 

instructions for receiving a bind request from a 

LDAP referred search requests- 
instructions for searching the local directory for 
5 an entry corresponding to the distinguished name (DN) of 

the bind request; 

instructions for authenticating the bind request if 

an entry for the bind DN is located within the local 

directory; 

10 instructions for checking a defined reference server 

for the prefix of the bind DN, if the bind DN is not 
found within local directory; 

instructions for contacting the reference server for 
authentication, if the prefix of the bind DN is located 
15 on the reference server; and 

instructions for denying the bind request if both 
the local directory and the reference server do not 
contain an entry corresponding to the bind DN. 

20 4, The computer program product according to claim 3, 
wherein the defined reference server contains: 
root DN' s ; and 
server location . 

25 5. A system for authenticating LDAP referral searches, 
comprising : 

means for receiving a bind request from a LDAP 
referred search request; 

means for searching the local directory for an entry 
30 corresponding to the distinguished name (DN) of the bind 
request ; 



17 

Docket NO.AUS920000806US1 



Express Mail No. 
EL356874379US 



means for authenticating the bind request if an 
entry for the bind DN is located within the local 
directory; 

means for checking a defined reference server for 
the prefix of the bind DN, if the bind DN is not found 
within local directory; 

means for contacting the reference server for 
authentication, if the prefix of the bind DN is located 
on the reference server; and 

means for denying the bind request if both the local 
directory and the reference server do not contain an 
entry corresponding to the bind DN. 

6. The system according to claim 5, wherein the defined 
reference server contains: 

Root DN's; and 

server location. 



